News

IIS Cumulative Patch Released

Microsoft Corp. issued a cumulative patch this week for its Internet Information Services Web server that fixes four critical new vulnerabilities and six other newly discovered bugs.

It is the largest collections of new bug fixes for IIS outside of a service pack in the last two years. The last cumulative patch for IIS was in August and fixed five flaws. A May 2001 cumulative patch rollup fixed three problems.

As a cumulative patch, the fix also includes all previously released fixes for the standalone IIS 4.0; IIS 5.0, which ships in Windows 2000; and IIS 5.1, which ships in Windows XP Professional Edition. Microsoft says it didn't include Windows .NET Server's IIS 6.0 in the general patch because it is a beta product and is not intended for production use. Microsoft was sending fixes directly to the limited number of customers officially running IIS 6.0 in production environments.

The security bulletin and patch are available at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms02-018.asp.

All four of the critical flaws involve buffer overflows. The other problems involve cross-site scripting, a denial of service via an FTP status request and an access violation in URL error handling.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • SharePoint Online Users To Get 'Modern' UI Push in April

    Microsoft plans to alter some of the tenant-level blocking capabilities that may have been set up by organizations and deliver its so-called "modern" user interface (UI) to Lists and Libraries for SharePoint Online users, starting in April.

  • How To Use PowerShell Splatting

    Despite its weird name, splatting can be a really handy technique if you create a lot of PowerShell scripts.

  • New Microsoft Customer Agreement for Buying Azure Services To Start in March

    Microsoft will have a new approach for organizations buying Azure services called the "Microsoft Customer Agreement," which will be available for some customers starting as early as this March.

  • Windows 7 To Fall Out of Support in One Year

    January 14 marks a one-year period before the end of support for Windows 7.

comments powered by Disqus
Most   Popular

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.